[ACTION REQUIRED] Cloud SWG Localization Zones Relocation Announcement: Warsaw (GPOWA), Vilnius (GLTVI)

The Localization Zones (LZ) for Warsaw, Poland (GPOWA) and Vilnius, Lithuania, (GLTVI), will be relocated from their current homes to the Cloud SWG compute point-of-presence (POP) in Frankfurt, Germany (GDEFR).

The new IPs will be available on July 29, 2026. The old IPs will be retired on August 31, 2026.

More Information

LZ’s allow Cloud SWG to request web content using IP addresses that match the country of the end user when there is no Cloud SWG POP in the end user’s country. This results in more content being properly localized, yielding a better end user experience.

Carefully review the information below to avoid disruption of service.

Relocation Date: July 29, 2026

IP ranges to be Retired on August 31, 2026

• 103.9.99.0/24 (GPOWA)
• 34.4.64.0/29 (GPOWA)
• 199.116.172.192/27 (GLTVI)

IP ranges existing and new on July 29, 2026

PLEASE ENSURE ACCESS FROM THESE RANGES IS ALLOWED.

• 199.247.38.164 - USE THIS IP for IPSEC connections after July 29, 2026
• 199.247.34.0/24 (GDEFR) - EXISTING
• 199.247.38.0/24 (GDEFR) - EXISTING
• 199.247.39.0/24 (GDEFR) - EXISTING
• 34.185.131.144/28 (GDEFR) - EXISTING
• 46.235.156.0/27 (GPOWA) - NEW on July 29, 2026
• 46.235.156.64/27 (GLTVI) - NEW on July 29, 2026

Required Action

Prior to the relocation date:

• Firewall rules regulating connectivity from your network to Cloud SWG should be adjusted to allow traffic to the ingress IP networks listed above.
• Third party applications that regulate connections by source IP address should be updated to accept connections from the egress IP networks listed above to ensure traffic proxied through Cloud SWG can reach the applications.

Failure to make these changes could prevent users from connecting to Cloud SWG, accessing third party web applications, or authenticating against the service using the Auth Connector (where applicable).

• IPsec: Customers must update their tunnel configurations to point to the GDEFR ingress IP address before August 31, 2026. This change can be made after July 29, 2026.
• WSS Agent, Symantec Enterprise Agent: Agent traffic will be automatically redirected to the replacement POP. No customer action is required.
• Explicit proxy and proxy forwarding: Customers directing traffic to proxy.threatpulse.net will be automatically redirected to the replacement POP. No customer action is required.
• Regardless of connection method, any configuration pointing to a specific POP hostname or IP address (not recommended) must be manually switched to the replacement POP prior to the decommissioning date to avoid an outage.

Please visit this KB article for a full list of IP networks used by Cloud SWG.

Technical Support

Experiencing issues? Contact technical support by visiting: https://support.broadcom.com/security.

For service status and maintenance updates visit and subscribe to Broadcom Service Status.